Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/vH54qoNC5yy13XCZEg_kTD3fh3Y.roa
File: vH54qoNC5yy13XCZEg_kTD3fh3Y.roa (raw, json)
Hash identifier: sbLzW2AWvZ1n1o9HaIm2bvHHIQuSN1EC61UrAPIr1YU=
Subject key identifier: BC:7E:78:AA:83:42:E7:2C:B5:DD:70:99:12:0F:E4:4C:3D:DF:87:76
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A0F90612BB137F688284EE4C7AAE139A4C
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/vH54qoNC5yy13XCZEg_kTD3fh3Y.roa
Signing time: Thu 01 Oct 2026 19:51:59 +0000
ROA not before: Thu 01 Oct 2026 19:51:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18978
IP address blocks: 2a10:a9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:06:12:bb:13:7f:68:82:84:ee:4c:7a:ae:13:9a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Oct 1 19:51:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc7e78aa8342e72cb5dd7099120fe44c3ddf8776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:96:24:e9:8c:3b:e4:4d:09:9f:5d:3d:fd:
06:ab:9a:96:b3:ef:d9:d3:d2:61:73:b4:cc:ef:01:
e2:aa:67:d8:91:df:70:73:a7:d2:74:3b:f7:72:42:
4c:ba:e2:40:ae:8a:00:8b:b4:41:ed:f8:2a:0e:a1:
14:af:3c:95:7a:36:10:59:78:8c:3b:ba:84:7f:ec:
9b:e5:de:05:ba:21:9b:3c:8d:71:6c:a9:aa:27:95:
43:3e:7d:e4:37:e3:0a:69:2b:9e:77:4a:3d:95:e1:
d6:9a:74:03:7e:8e:1a:a4:a6:13:77:5b:97:b0:ac:
2f:aa:9c:29:fa:27:81:a1:95:88:a2:0d:55:8d:3e:
43:17:28:f5:c3:d0:8a:b4:9a:b3:e7:f6:83:e8:c6:
b9:0b:0e:5d:92:4e:ba:52:f8:b9:98:79:00:95:6a:
e2:11:59:85:0f:3c:2b:ab:85:b4:3d:b9:8f:ee:5e:
f1:65:2c:f8:c4:68:e8:a2:c4:50:88:a6:d2:3a:08:
8e:b3:25:bc:91:c9:b7:dd:84:13:cb:69:e4:59:18:
10:ba:c3:a6:d1:e7:bf:3d:17:54:c4:91:ce:9e:6e:
20:0c:ea:74:b1:78:29:d7:66:c6:9b:e0:86:0f:31:
f4:b4:8f:ba:35:77:ab:70:d3:5d:2a:87:b8:37:81:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7E:78:AA:83:42:E7:2C:B5:DD:70:99:12:0F:E4:4C:3D:DF:87:76
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/vH54qoNC5yy13XCZEg_kTD3fh3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:43:d7:53:47:c6:1b:ea:c1:fe:18:bf:e9:70:50:97:57:e6:
10:7c:1a:86:80:ad:1b:41:1f:45:f3:da:a6:69:54:8c:a4:6e:
e5:16:10:6c:8e:7c:8d:fb:82:e7:00:0e:0f:2c:e2:de:89:37:
a7:e5:dd:c5:d2:10:5e:2c:7c:21:95:a5:a6:cb:96:cd:cd:55:
ca:63:33:1f:e4:47:94:c5:65:67:8a:0b:c7:e2:62:e5:00:3b:
50:69:11:f6:79:e8:c4:c7:15:85:d8:b5:3a:bf:f8:2e:a3:15:
f0:aa:cd:68:ec:26:88:64:e9:21:db:1f:5a:f6:ee:21:de:46:
40:7c:62:b4:9d:5d:cc:2b:b9:71:53:56:0e:38:92:63:0e:fb:
f9:a9:7b:0d:fe:9b:e9:c8:e8:cf:13:40:f6:07:10:ab:25:94:
5d:11:c5:d5:8b:dd:fe:ab:2f:15:ac:9d:93:4a:ab:9b:2b:b9:
cd:d3:3a:55:f1:85:0d:e3:82:a4:5b:62:bb:29:0c:be:95:8f:
e3:33:85:dc:0b:0b:bb:c9:1d:f0:f0:fa:d8:fa:4a:99:c9:33:
4c:d0:0f:9e:cd:bb:88:23:8d:ad:cd:a0:47:fd:f9:ed:9b:5d:
68:3f:af:c4:34:46:10:c2:8e:b7:2b:5a:7d:91:96:88:24:0c:
8b:57:6f:75
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaD5BhK7E39ogoTuTHquE5pMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjYxMDAxMTk1MTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzdlNzhhYTgzNDJlNzJjYjVkZDcwOTkxMjBmZTQ0YzNkZGY4Nzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiCWJOmMO+RNCZ9dPf0Gq5qWs+/Z
09Jhc7TM7wHiqmfYkd9wc6fSdDv3ckJMuuJArooAi7RB7fgqDqEUrzyVejYQWXiM
O7qEf+yb5d4FuiGbPI1xbKmqJ5VDPn3kN+MKaSued0o9leHWmnQDfo4apKYTd1uX
sKwvqpwp+ieBoZWIog1VjT5DFyj1w9CKtJqz5/aD6Ma5Cw5dkk66Uvi5mHkAlWri
EVmFDzwrq4W0PbmP7l7xZSz4xGjoosRQiKbSOgiOsyW8kcm33YQTy2nkWRgQusOm
0ee/PRdUxJHOnm4gDOp0sXgp12bGm+CGDzH0tI+6NXercNNdKoe4N4Gt7QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLx+eKqDQucstd1wmRIP5Ew934d2MB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvdkg1NHFvTkM1eXkxM1hDWkVnX2tURDNmaDNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhCpwDAN
BgkqhkiG9w0BAQsFAAOCAQEAOEPXU0fGG+rB/hi/6XBQl1fmEHwahoCtG0EfRfPa
pmlUjKRu5RYQbI58jfuC5wAODyzi3ok3p+XdxdIQXix8IZWlpsuWzc1VymMzH+RH
lMVlZ4oLx+Ji5QA7UGkR9nnoxMcVhdi1Or/4LqMV8KrNaOwmiGTpIdsfWvbuId5G
QHxitJ1dzCu5cVNWDjiSYw77+al7Df6b6cjozxNA9gcQqyWUXRHF1Yvd/qsvFayd
k0qrmyu5zdM6VfGFDeOCpFtiuykMvpWP4zOF3AsLu8kd8PD62PpKmckzTNAPns27
iCONrc2gR/357ZtdaD+vxDRGEMKOtytafZGWiCQMi1dvdQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:22:08 2026 by rpki-client